@inproceedings{Jin2019IsBR,
  title={Is BERT Really Robust? Natural Language Attack on Text Classification and Entailment},
  author={Di Jin and Zhijing Jin and Joey Tianyi Zhou and Peter Szolovits},
  booktitle={AAAI},
  year={2020}
}